This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft File: hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json) Hash identifier: 85eNnd2dcV5F2ISc39bOOvBl1fH5MJGymRu5kS+qLvs= Subject key identifier: 21:0B:7C:EA:C5:37:9A:A3:02:8E:EF:AB:D8:11:D3:7D:81:D1:52:EF Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15 Certificate issuer: /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015 Certificate serial: 0221 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft Manifest number: 021F Signing time: Sun 21 Dec 2025 04:20:21 +0000 Manifest this update: Sun 21 Dec 2025 04:20:20 +0000 Manifest next update: Tue 23 Dec 2025 04:20:20 +0000 Files and hashes: 1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: qQcO+N+DOD62yHi5efsrAKfVI4Wmz2uNU+bXSsgRXNc=) 2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=) 3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 23 Dec 2025 04:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015 Validity Not Before: Dec 21 04:20:20 2025 GMT Not After : Dec 23 04:20:20 2025 GMT Subject: CN=69477585-597e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:52:b2:b8:bf:2e:70:17:f4:58:b9:13:a4:79: c7:a4:a2:09:1a:60:46:f3:cb:72:47:bf:13:c4:03: e5:d2:cc:ee:37:96:3c:a2:02:c6:d1:0d:ea:ea:8d: 3f:9e:f8:00:df:20:f4:f1:51:d0:ce:6b:f9:45:76: 13:07:ed:10:d7:49:ae:15:26:07:a7:5d:8e:67:b6: b1:f0:91:1d:af:da:ac:f9:e2:45:fc:9b:56:30:a6: d8:fe:64:c5:b2:37:c5:d4:02:af:3e:36:21:c0:6e: 3c:67:d2:e9:e8:92:67:f8:19:8e:a2:5e:17:2c:43: 41:10:a7:1c:b8:19:65:92:8f:a9:89:80:0b:a4:d0: 52:9e:4e:7b:1e:68:e8:8f:80:5e:53:f0:26:db:55: bd:5d:6f:04:ad:a2:5c:e3:14:61:a6:93:00:b2:e5: 2b:04:11:50:ff:4e:70:f7:f7:16:ee:a8:02:65:22: eb:fb:e9:99:6f:e5:8c:45:7e:f8:0b:e2:5f:22:6b: 59:28:3a:3a:65:12:60:ce:ed:7a:cd:22:06:13:1f: 3f:71:8f:9c:29:01:db:a3:28:30:87:3d:c0:e9:c1: b9:0a:77:cb:47:8f:74:0b:f0:d8:b8:23:06:04:55: 75:cf:18:df:4f:74:71:c6:86:54:12:82:5f:37:14: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0B:7C:EA:C5:37:9A:A3:02:8E:EF:AB:D8:11:D3:7D:81:D1:52:EF X509v3 Authority Key Identifier: keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8c:1c:fd:74:c7:e8:68:00:d1:d1:80:16:aa:72:c9:4a:71: d3:6f:5a:af:f5:38:5a:22:ba:19:20:b9:6c:61:ab:05:41:a7: 69:f0:1d:f0:79:14:5b:e0:a3:7e:21:a9:0e:29:1e:45:a5:b4: 35:ce:b6:39:04:0b:af:2d:01:08:e6:de:5f:9f:5d:62:0d:ba: b4:f5:55:cd:75:33:9b:bd:0e:be:f6:bc:83:ee:cf:55:ac:cb: ef:b1:fa:16:3d:77:84:22:93:4a:9f:cb:5e:4f:a1:97:9e:b6: 43:09:48:e1:3f:ef:50:11:55:e6:8e:e3:a9:9a:83:4a:b7:eb: 70:1e:af:6f:9e:9f:0e:bd:71:e6:cd:1b:3b:3a:c3:e4:94:e1: 44:f7:d4:ff:5d:f1:a2:4b:9c:02:03:5e:9c:50:cd:8e:22:55: 1d:5a:9d:ac:4b:61:d0:5b:58:ca:ae:c9:ef:43:25:7b:b1:d7: e1:49:89:d9:1c:08:15:0a:cc:b6:34:0d:4b:e0:78:ef:40:47: 95:00:3b:69:cb:c3:14:9a:72:9d:6d:50:ea:2c:3f:cb:c8:d5: 1e:94:03:84:11:43:43:6d:ce:db:7f:92:da:db:bc:35:3c:f2: 68:18:21:06:03:23:24:a2:24:c1:9b:79:bc:f1:a9:03:da:3b: eb:12:5e:01 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OEY0QTFBRjExMC8GA1UEBRMoODRGMDFGQzMzOEREMkMxNDFFQTQ1RDMxN0IyMTFG NzZDRjVEMDAxNTAeFw0yNTEyMjEwNDIwMjBaFw0yNTEyMjMwNDIwMjBaMBgxFjAU BgNVBAMTDTY5NDc3NTg1LTU5N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDvUrK4vy5wF/RYuROkecekogkaYEbzy3JHvxPEA+XSzO43ljyiAsbRDerq jT+e+ADfIPTxUdDOa/lFdhMH7RDXSa4VJgenXY5ntrHwkR2v2qz54kX8m1Ywptj+ ZMWyN8XUAq8+NiHAbjxn0unokmf4GY6iXhcsQ0EQpxy4GWWSj6mJgAuk0FKeTnse aOiPgF5T8CbbVb1dbwStolzjFGGmkwCy5SsEEVD/TnD39xbuqAJlIuv76Zlv5YxF fvgL4l8ia1koOjplEmDO7XrNIgYTHz9xj5wpAdujKDCHPcDpwbkKd8tHj3QL8Ni4 IwYEVXXPGN9PdHHGhlQSgl83FCKhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIQt8 6sU3mqMCju+r2BHTfYHRUu8wHwYDVR0jBBgwFoAUhPAfwzjdLBQepF0xeyEfds9d ABUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjhGNEExLzc5ODAyNkQwM0Y1QzExRUZCODNDNzk3RTc2MkU5NTFBL2hQQWZ3 empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2hQQWZ3empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OEY0QTEvNzk4MDI2RDAzRjVDMTFFRkI4M0M3OTdFNzYy RTk1MUEvaFBBZnd6amRMQlFlcEYweGV5RWZkczlkQUJVLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKjBz9dMfoaADR0YAWqnLJSnHTb1qv 9ThaIroZILlsYasFQadp8B3weRRb4KN+IakOKR5FpbQ1zrY5BAuvLQEI5t5fn11i Dbq09VXNdTObvQ6+9ryD7s9VrMvvsfoWPXeEIpNKn8teT6GXnrZDCUjhP+9QEVXm juOpmoNKt+twHq9vnp8OvXHmzRs7OsPklOFE99T/XfGiS5wCA16cUM2OIlUdWp2s S2HQW1jKrsnvQyV7sdfhSYnZHAgVCsy2NA1L4HjvQEeVADtpy8MUmnKdbVDqLD/L yNUelAOEEUNDbc7bf5La27w1PPJoGCEGAyMkoiTBm3m88akD2jvrEl4B -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:39 2025 by rpki-client